PRIVACY POLICY
Effective date: 24 July 2026
This Privacy Policy explains how we collect, use, disclose and protect personal data when you visit or use our online store, create an account, place an order, contact us, subscribe to marketing communications or otherwise interact with us.
1. Who is the controller of your personal data?
The controller of your personal data is:
MIMII SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄul. 30 Stycznia 38B83-110 Tczew, PolandKRS: 0000943877NIP: 5932630848REGON: 520826826Share capital: PLN 5,000.00
Email: info@mimii.plTelephone: +48 794 906 709
In this Privacy Policy, “Mimii”, “we”, “us” and “our” refer to the controller identified above.
2. What personal data do we process?
Depending on how you use the Store, we may process the following categories of personal data:
identification and contact data, such as your name, surname, email address and telephone number;
delivery and billing data, such as your address, country and, where applicable, company and tax identification details;
order and transaction data, such as the products and variants ordered, order value, payment method, payment status, delivery method, returns and complaints;
account data, such as your login details, order history and saved preferences;
correspondence and customer-service data, including the content of messages, enquiries and complaints;
review and user-content data, such as your name or nickname, rating, review, photograph or other content that you choose to submit;
marketing preferences, including newsletter consent and records of withdrawal or objection;
technical and usage data, such as IP address, device and browser information, cookie identifiers, session data and information about how you use the Store;
fraud-prevention and security data.
We do not normally receive your full payment-card details. These are processed directly by the relevant payment service provider.
3. Where do we obtain your data?
We obtain personal data:
directly from you, for example when you place an order, create an account, contact us, submit a review or subscribe to the newsletter;
automatically from your device when you use the Store, including through cookies and similar technologies, subject to your consent choices where required;
from service providers involved in the transaction, such as Shopify, payment providers and delivery companies;
from another person where that person places an order or arranges delivery for you, for example when purchasing a gift.
If you provide us with another person’s data, please ensure that you are authorised to do so and that the person has been informed about this Privacy Policy.
4. Why do we process your data and on what legal basis?
We process personal data for the following purposes:
Processing orders and performing contracts
This includes accepting and processing orders, taking payment, arranging delivery, handling returns, withdrawals and complaints, providing customer support and managing your account.
Legal basis: performance of a contract or taking steps at your request before entering into a contract — Article 6(1)(b) GDPR.
Complying with legal obligations
This includes accounting and tax obligations, keeping legally required records, responding to lawful requests from public authorities and fulfilling obligations relating to consumer and product-safety law.
Legal basis: compliance with a legal obligation — Article 6(1)(c) GDPR.
Protecting our rights, customers and Store
This includes preventing fraud and misuse, maintaining IT and Store security, establishing, pursuing or defending legal claims, handling disputes and keeping evidence of transactions and communications.
Legal basis: our legitimate interests — Article 6(1)(f) GDPR.
Improving the Store and customer service
This includes analysing aggregated or otherwise lawfully collected information, diagnosing technical problems, improving the Store and measuring customer satisfaction.
Legal basis: our legitimate interests — Article 6(1)(f) GDPR; where non-essential cookies or similar technologies are used, your consent — Article 6(1)(a) GDPR.
Sending newsletters and electronic marketing
Where you have subscribed, we may send you information about products, offers and news.
Legal basis: your consent — Article 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before its withdrawal.
Personalisation, analytics and advertising
Where you give the required consent, we may use analytics and advertising technologies to understand how the Store is used, personalise content, measure campaigns and display more relevant advertising.
Legal basis: your consent — Article 6(1)(a) GDPR.
Publishing and moderating reviews
If you submit a product review or other content for publication, we process it to publish, moderate and protect the integrity of the review system.
Legal basis: your consent where requested and/or our legitimate interest in presenting genuine customer feedback and preventing abuse — Article 6(1)(a) or (f) GDPR, depending on the circumstances.
5. Is providing personal data mandatory?
Providing personal data is voluntary. However, certain data is necessary to:
place and fulfil an order;
receive delivery;
create and use a customer account;
receive a response to an enquiry;
process a return, withdrawal or complaint;
receive marketing communications if you choose to subscribe.
If you do not provide the data required for a contract, we may be unable to accept or fulfil your order or provide the requested service.
6. Who may receive your data?
We may disclose personal data only where necessary and on an appropriate legal basis to:
Shopify and its affiliates, which provide the e-commerce platform and related Store services;
order-management, product-management and business-software providers, including BaseLinker and Odoo, where used for the relevant order or business process;
delivery and logistics providers, including GLS and other carriers selected for an order;
payment providers available at checkout, which process payments and help prevent payment fraud;
providers of hosting, cloud, email, customer-service, translation, IT support and cybersecurity services;
newsletter and marketing-service providers;
analytics and advertising providers, such as Google or Meta, where their services are enabled and the required consent has been obtained;
review-service providers, such as Judge.me, where their services are enabled;
accounting, legal, tax and audit advisers;
public authorities, courts or law-enforcement bodies where disclosure is required by law;
a purchaser, successor or adviser in connection with a corporate transaction, subject to appropriate confidentiality and legal safeguards.
These recipients process data either on our instructions as processors or for their own purposes as independent controllers, depending on the service and the applicable law.
Our Store is hosted by Shopify. Shopify processes certain personal data to provide and improve its services. More information is available in the Shopify Consumer Privacy Policy.
7. International transfers of personal data
Some service providers or their affiliates may process personal data outside the European Economic Area (“EEA”). Where personal data is transferred to a country outside the EEA, we use safeguards required by applicable law, such as:
a European Commission adequacy decision;
the European Commission’s Standard Contractual Clauses;
additional technical or organisational safeguards where necessary.
You may contact us for more information about the safeguards relevant to your personal data.
8. How long do we retain personal data?
We retain personal data only for as long as necessary for the purpose for which it was collected and as required by law. In particular:
order, invoice, tax and accounting records are retained for the period required by applicable tax and accounting law, generally for five years calculated from the end of the relevant tax year;
account data is retained while the account remains active and afterwards for as long as necessary to comply with legal obligations or deal with claims;
data relating to withdrawals, returns, complaints and customer correspondence is retained until the matter is resolved and, where necessary, until the expiry of applicable limitation periods;
data processed for legal claims is retained until the relevant claims can no longer be pursued or defended;
newsletter and marketing data is processed until you withdraw your consent or object, although we may retain a minimal suppression record to ensure that no further marketing is sent;
cookie and similar-technology data is retained according to the lifespan of the relevant technology and your privacy choices.
When personal data is no longer required, we delete it, anonymise it or securely restrict further processing where deletion is not immediately possible.
9. Cookies and similar technologies
The Store uses cookies and similar technologies. These may include:
strictly necessary cookies, required for the Store, shopping cart, checkout, security and other services requested by you;
functional cookies, which remember selected settings and improve Store functionality;
analytics cookies, which help us understand how visitors use the Store and measure its performance;
advertising cookies and pixels, which may be used to measure campaigns, personalise advertising and limit repeated advertisements.
Strictly necessary technologies may be used without consent where permitted by law. Optional functional, analytics and advertising technologies are used only after you provide consent where consent is required.
You can accept, reject or change your choices through the cookie banner or the cookie-preference link available in the Store. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal. Blocking strictly necessary cookies in your browser may prevent parts of the Store from working correctly.
Third-party technologies may also be governed by the privacy and cookie policies of the relevant providers.
10. Newsletter and direct marketing
We send email marketing only where we have an appropriate legal basis and, where required, your consent. You can unsubscribe at any time by:
using the unsubscribe link in a marketing email; or
contacting us at info@mimii.pl.
You have the right to object at any time to processing of your personal data for direct-marketing purposes. After you unsubscribe or object, we will stop using your data for that purpose.
11. Reviews and publicly visible content
If you choose to submit a product review, rating, photograph or other content, some information — such as your name or nickname and the submitted content — may be displayed publicly in the Store. Do not include sensitive information or information about another person unless you are authorised to publish it.
We may moderate, refuse or remove content where reasonably necessary to prevent fraud, unlawful content, abuse or a breach of Store rules.
12. Profiling and automated decision-making
Where you have consented to analytics or advertising technologies, we and our service providers may use information about Store activity to create audience segments, personalise content or advertising and measure campaign performance.
We do not make decisions based solely on automated processing that produce legal effects or similarly significantly affect you, unless this is permitted by law and you are separately informed.
13. Your data-protection rights
Subject to the conditions set out in the GDPR, you may have the right to:
request access to your personal data and receive a copy;
request rectification of inaccurate or incomplete data;
request erasure of your personal data;
request restriction of processing;
receive data that you provided to us in a structured, commonly used and machine-readable format and transmit it to another controller;
object to processing based on our legitimate interests for reasons relating to your particular situation;
object at any time to processing for direct-marketing purposes;
withdraw consent at any time where processing is based on consent;
lodge a complaint with a competent supervisory authority.
These rights are not absolute and may be subject to legal conditions or exceptions. To exercise a right, contact us at info@mimii.pl. We may need to verify your identity before completing the request.
14. Complaints to the supervisory authority
If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the supervisory authority in your country of residence, work or the place of the alleged infringement.
In Poland, the supervisory authority is:
President of the Personal Data Protection OfficePersonal Data Protection Office (UODO)ul. Stanisława Moniuszki 1A00-014 Warszawa, Polandhttps://uodo.gov.pl/en/p/contact
We encourage you to contact us first so that we can try to resolve the issue.
15. Data security
We apply appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration, disclosure or destruction. These measures include encrypted connections, access controls and measures appropriate to the nature and risk of processing.
No online service or method of transmission is completely secure. If you believe that your account or personal data may have been compromised, please contact us promptly.
16. Children’s data
Our products may be intended for children, but the Store and its purchasing services are intended for adults. We do not knowingly request that children place orders or provide personal data without the involvement of a parent or legal guardian.
If you are a parent or legal guardian and believe that a child has provided personal data to us without appropriate authorisation, please contact us.
17. Changes to this Privacy Policy
We may update this Privacy Policy when our services, providers or legal obligations change. The current version will be published in the Store together with its effective date. Where required by law, we will provide additional notice or request renewed consent.
18. Contact
For questions about this Privacy Policy or the processing of your personal data, please contact:
MIMII SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ Email: info@mimii.pl Telephone: +48 794 906 709Address: ul. 30 Stycznia 38B, 83-110 Tczew, Poland
